How containerd compares to runc
How do these two compare?
As far as I understand, runc is a runtime environment for containers. That means that this component provides the necessary environment to run containers. What is the role of containerd then?
If it does the rest (networking, volume management, etc) then what is the role of the Docker Engine? And what about containerd-shim? Basically, I'm trying to understand what each of these components do.
Solution
I will give a high level overview to get you started:
- containerd is a container runtime which can manage a complete container lifecycle - from image transfer/storage to container execution, supervision and networking.
- container-shim handle headless containers, meaning once runc initializes the containers, it exits handing the containers over to the container-shim which acts as some middleman.
- runc is lightweight universal run time container, which abides by the OCI specification. runc is used by containerd for spawning and running containers according to OCI spec. It is also the repackaging of libcontainer.
- grpc used for communication between containerd and docker-engine.
- OCI maintains the OCI specification for runtime and images. The current docker versions support OCI image and runtime specs.
More Links:
- Jenkins: Can't connect to Docker daemon
- Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? inside a Dockerfile
- ERROR: Version in "./docker-compose.yml" is unsupported
- How do I use a custom pip.conf in a docker image?
- How to Give A Postgres User SuperUser Privilege Through docker-compose?
- docker-compose: Dockerfile succesfully copies the file but is not found on the container
- Disable ip v6 in docker container
- Mixing ENV variables with and without assignments in docker compose yaml for Gitlab CI
- startup exception for aspnet core worker docker container attempting to set secret from env variable in Kubernetes
- In a multi-node Docker build, where is the layer cache stored? And when does cache garbage collection occur?
- Use VS Code (mssql extension) to connect to SQL Server running in Docker on Windows
- Docker Desktop - WSL update failed
- Can’t delete docker image with dependent child images
- How to export Yii2 migrations into docker container
- docker compose: hundreds of health check processes not terminated
- AttributeError: module 'numba' has no attribute 'generated_jit'
- Can not connect to Postgres Container from pgAdmin
- The system cannot find the file specified typescript
- Jupyter password and Docker
- Docker Not Allowing me to use --from tag
- What is the difference between CMD and ENTRYPOINT in a Dockerfile?
- Zabbix web server to Zabbix server connection not working
- How containerd compares to runc
- GitLab docker cannot fork "Resource temporarily unavailable"
- P1000: Authentication failed against database server at `localhost`, the provided database credentials for `postgres` are not valid
- Can't understand docker iptables rule
- How do I look at what's cached by Docker
- InvalidImage(ImageLayerFailure: UnsupportedImageLayerDetected when deploying AWS Docker Lambda using AWS CDK
- Install / Configure SQL Server PDO driver for PHP docker image
- My docker container has no internet